Download UFED Logical Analyzer
Transcript
C hapter 11: Camera and screenshot evidence 143 Chapter 11: Camera and screenshot evidence UFED 4PC or UFED Touch together with the UFED camera enables you to collect evidence by taking pictures or videos of a device. A screenshot feature captures internal screenshots directly from a Blackberry, Android or iOS device. These options can be useful as complimentary evidence or in instances when data cannot be extracted from a device. This evidence can be displayed in UFED Logical Analyzer together with any notes, categories and bookmarks, which were added by the examiner. For information on capturing camera and screenshot evidence, refer to the UFED 4PC or UFED Touch user manuals. To import camera or screenshot evidence: Click the Evidence.ufd file. The Camera Evidence (pictures and videos) or Phone Evidence (screenshots) is imported into UFED Logical Analyzer as a new project. The evidence includes Phone Evidence or Camera Evidence divided by category, as well as entity bookmarks and notes that were added during the extraction. An example is displayed next.